Security MCP servers

1,823 tagged Security, measured the same way as everything else here.

Browse within: mcp-server 265model-context-protocol 240compliance 74ai-security 70cli 66ai-governance 62AI Safety 58LLM 53cybersecurity 44devsecops 40agent-security 35agentic-ai 33ai-tools 33audit 32

vouchspec

529

mordiaky/vouchspec

MCP server Claude CodeCodexCursor +2

Read-only discovery for exact-commit Agent Skill validation, x402 payment, and signed receipts. Remote server at vouchspec.plyrium.com.

not rated 1 1mo ago A tokens not measured

mcp-keycloak-admin

530

mrz1880/mcp-keycloak-admin

MCP server Claude CodeCodexCursor +2

Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events. Runs locally from the mcp-keycloak-admin npm package. Needs 10 environment variables to run.

not rated 1 4d ago A tokens not measured original MIT

auth-token-service

531

mikerawsonnz/gosce-agents

MCP server Claude CodeCodexCursor +2

One of 9 in server.json

Hash passwords with bcrypt and issue/verify JWT session tokens over A2A + MCP. Remote server at bcrypt-python-jose-d0e0d0.getvda.ai.

not rated 1 4d ago A tokens not measured original MIT

aiglare

532

nugehs/aiglare

MCP server Claude CodeCodexCursor +2

Audit AI/LLM features for governance guardrails: confidence, fallback, validation, human-in-loop. Runs locally from the @nugehs/aiglare npm package.

not rated 1 2mo ago A tokens not measured original MIT

pageguard-mcp

533

pageguard/pageguard-mcp

MCP server Claude CodeCodexCursor +2

Privacy compliance scanning for AI coding tools. Detects tracking tech, cookies, and data gaps. Runs locally from the pageguard-mcp npm package. Needs 1 environment variable to run.

not rated 1 5mo ago A tokens not measured original MIT

recon-kit-mcp

534

nan786521/recon-mcp

MCP server Claude CodeCodexCursor +2

An MCP server that gives AI coding agents (Claude Code, Codex, Cline) safe, structured network & security reconnaissance tools — DNS, WHOIS, TLS, HTTP headers, and port scanning. For authorized testing and education only. Runs locally from the recon-kit-mcp Python package.

not rated 1 2mo ago A tokens not measured original MIT

secrets-le

535

nolindnaidoo/secrets-le

MCP server Claude CodeCodexCursor +2

Detect hardcoded secrets in source and config. Reports masked previews, never the values. Runs locally from the secrets-le-mcp npm package.

not rated 1 5d ago A tokens not measured original MIT

dechonet-mcp

536

node-man/dechonet-mcp

MCP server Claude CodeCodexCursor +2

13 security recon tools for AI agents — DNS, SSL, HTTP, email, ports, ASN. Health Score 0-100. Runs locally from the dechonet-mcp npm package. Needs 2 environment variables to run.

not rated 1 4d ago A tokens not measured

vulnfeed

537

novadyne-hq/vulnfeed-mcp

MCP server Claude CodeCodexCursor +2

Dependency vulnerability monitoring MCP server — knows your lockfile, prioritizes by EPSS exploit probability, recommends fix versions. Runs locally from the vulnfeed-mcp Python package. Needs 1 environment variable to run.

not rated 1 1mo ago A tokens not measured original MIT

deadchannel

538

plus8bit/deadchannel

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Check an x402 endpoint before you pay it: verdict, risk score and what is wrong. $0.005 in USDC. Runs locally from the deadchannel-mcp npm package. Needs 2 environment variables to run.

not rated 1 yesterday A tokens not measured

chainanalyzer-mcp

539

rascal-3/chainanalyzer-mcp

MCP server Claude CodeCodexCursor +2

Multi-chain AML risk scoring, sanctions screening, and tx tracing across BTC, ETH, POL, AVAX, SOL. Runs locally from the chainanalyzer-mcp npm package. Needs 3 environment variables to run.

not rated 1 29d ago A tokens not measured original MIT

network

540

rog0x/mcp-network-tools

MCP server Claude CodeCodexCursor +2

DNS, IP info, SSL, WHOIS, ping for AI agents. Runs locally from the @rog0x/mcp-network-tools npm package.

not rated 1 5mo ago A tokens not measured

bevigil

541

santhosh-005/bevigil-mcp-server

MCP server Claude CodeCodexCursor +2

Discover mobile app attack surfaces via BeVigil OSINT — hosts, subdomains, URLs, and more. Runs locally from the bevigil-mcp-server npm package. Needs 1 environment variable to run.

not rated 1 14d ago A tokens not measured original MIT

arcwall-security

542

rom-baro/arcwall-mcp

MCP server Claude CodeCodexCursor +2

Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks. Runs locally from the @arcwall/mcp-server npm package. Needs 1 environment variable to run.

not rated 1 4mo ago A tokens not measured

agent-guardrail

543

rudimentall1/agent-guardrail

MCP server Claude CodeCodexCursor +2

A deterministic policy firewall for AI agent tool calls — blocks, warns, or allows based on rules you write, not a risk score. Runs locally from the guardrail-mcp Python package.

not rated 1 13d ago A tokens not measured original MIT

astracipher

544

san-techie21/astracipher

MCP server Claude CodeCodexCursor +2

Cryptographic identity for AI agents: W3C DIDs, Verifiable Credentials, post-quantum crypto. Runs locally from the @astracipher/core npm package.

not rated 1 4d ago A tokens not measured

radiochron

545

sergii-ziborov/radiochron-mcp

MCP server Claude CodeCodexCursor +2

Local-first Wi-Fi incident diagnostics with native BLE scan, history, and risk evidence. Runs locally from the radiochron-mcp npm package.

not rated 1 today A tokens not measured original MIT

ghostfree

546

shane-js/ghostfree

MCP server Claude CodeCodexCursor +2

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs. Runs locally from the ghostfree npm package.

not rated 1 5mo ago A tokens not measured original MIT

security-recipes

547

stevologic/security-recipes.ai

MCP server Claude CodeCodexCursor +2

Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner. Remote server at security-recipes.ai.

not rated 1 today A tokens not measured original Apache-2.0

eidolon-osint

548

sudohnim/eidolon

MCP server Claude CodeCodexCursor +2

Local, privacy-first, MCP-native OSINT exposure scanner. Runs locally from the eidolon-osint Python package.

not rated 1 2mo ago A tokens not measured AGPL-3.0

uchit/mcp-regulated-ai-compliance

MCP server Claude CodeCodexCursor +2

Regulated-industry AI compliance: EU AI Act, APRA, NIST AI RMF, ISO 42001, AU AI Safety. Runs locally from the @hellouchit/mcp-regulated-ai-compliance npm package.

not rated 1 3mo ago A tokens not measured original Apache-2.0

vantio-gate

550

vantioai/vantio-open-core

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Vantio Gate — Policy Latch dry-run evaluate for agents. No live enforce from MCP. Runs locally from the @vantio/gate-mcp npm package. Needs 2 environment variables to run.

not rated 1 7d ago A tokens not measured

dominion-observatory

551

vdineshk/dominion-observatory

MCP server Claude CodeCodexCursor +2

Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools. Remote server at dominion-observatory.sgdata.workers.dev.

not rated 1 3mo ago A tokens not measured

privacy

552

thegridwork/privacy

MCP server Claude CodeCodexCursor +2

Audit websites for GDPR, CCPA, and ePrivacy compliance — trackers, consent, and policies. Runs locally from the gridwork-privacy npm package.

not rated 1 4mo ago A tokens not measured

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: